fidelity-investments-login[.]at

PhishDestroy identifies fidelity-investments-login.at as an active credential phishing domain masquerading as the legitimate Fidelity Investments login portal. This fraudulent site is engineered to steal user credentials through brand impersonation, targeting victims with a spoofed interface that closely replicates the official Fidelity Investments website. The page is likely hosted with a malicious login form designed to harvest usernames, passwords, and potentially multi-factor authentication codes for unauthorized account access and financial theft.

Technical indicators for this domain reveal heightened risk: VirusTotal reports a detection ratio of 23 out of 95 security vendors, indicating partial but not universal recognition of the threat. The domain resolves to IP address 95.129.234.38 and utilizes a Let's Encrypt SSL certificate, which does not guarantee legitimacy. Public WHOIS data shows this domain was recently registered, though the exact creation date is not specified in the available intelligence. It has been flagged by multiple blocklists including PhishingArmy and OISD, and is currently blocked by enterprise and consumer security platforms operating these lists.

As of the latest assessment, fidelity-investments-login.at remains active and accessible via its IP and domain. Immediate defensive actions include blocking the domain and IP at the network and endpoint levels. Users should avoid interacting with this site entirely. The residual risk remains elevated due to active hosting, partial detection coverage, and the use of a trusted SSL issuer to lend false credibility. Continuous monitoring and proactive blocking are strongly advised to prevent credential compromise and financial fraud.